Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/CgID8m03ufu5qBYWGYQ6hOUdvko.roa
File:                     CgID8m03ufu5qBYWGYQ6hOUdvko.roa (raw, json)
Hash identifier:          9oHzDHIQ0fPLr3vrEFoPzqmfC9LvSYXig5AqhgEyczM=
Subject key identifier:   0A:02:03:F2:6D:37:B9:FB:B9:A8:16:16:19:84:3A:84:E5:1D:BE:4A
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       0997343C
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/CgID8m03ufu5qBYWGYQ6hOUdvko.roa
Signing time:             Sun 05 Jun 2022 11:03:20 +0000
ROA not before:           Sun 05 Jun 2022 11:03:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        178.253.55.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160904252 (0x997343c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Jun  5 11:03:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0a0203f26d37b9fbb9a8161619843a84e51dbe4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6e:46:4b:8c:c8:d9:04:3b:c1:f3:f2:a4:6b:
                    d9:16:65:73:e3:06:e6:f7:d9:ac:c5:4f:63:c8:d0:
                    22:96:e3:11:35:32:00:5b:10:ab:e7:09:31:a2:bd:
                    f5:43:b8:df:bc:09:69:24:b4:73:89:bf:fa:f1:6e:
                    73:66:1f:73:93:82:76:e1:28:b0:a1:7f:a8:9c:52:
                    c2:ed:a5:01:ea:e3:54:f2:50:3c:3b:ed:88:f0:2b:
                    24:b4:ab:c4:b3:7f:ca:e3:17:86:ee:05:a6:7f:ed:
                    c7:e2:4f:87:c8:76:53:87:ff:4d:82:7f:24:42:d2:
                    fe:69:25:9b:c1:ef:ef:76:3a:86:bb:19:8b:13:d4:
                    77:3c:af:57:0e:83:69:04:5c:c5:a4:e4:bd:42:e6:
                    25:c5:e4:a5:8b:c5:da:54:47:7f:18:b7:a0:36:39:
                    24:3b:eb:a4:d4:8a:24:74:a8:fb:da:31:cc:12:cf:
                    d4:7c:d4:80:56:14:78:07:ef:23:89:5c:94:41:08:
                    fc:88:bf:88:54:20:20:4e:d3:ca:8f:0c:ab:7d:42:
                    7c:21:e4:33:59:b3:d8:af:d5:50:e1:6c:27:a5:0b:
                    73:59:90:d0:46:3a:29:19:b8:e0:ec:f1:bc:0a:64:
                    1f:1e:89:e2:2e:61:db:80:ce:63:5b:8e:27:73:8f:
                    44:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:02:03:F2:6D:37:B9:FB:B9:A8:16:16:19:84:3A:84:E5:1D:BE:4A
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/CgID8m03ufu5qBYWGYQ6hOUdvko.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.253.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:9a:4b:60:40:c7:e5:69:8e:a3:26:8b:93:56:25:1c:f6:96:
         71:53:d6:87:39:f9:36:55:01:04:59:cc:ad:ba:3d:96:9c:5d:
         5e:8b:61:68:79:ea:40:e9:45:07:4b:55:cb:66:51:e8:81:6d:
         19:06:4b:1c:45:92:75:f6:7d:b4:f6:7b:0a:64:3b:5e:41:25:
         1a:96:51:e3:2a:55:63:b8:f6:66:63:84:0a:81:c3:ee:b3:92:
         43:4f:c9:5b:54:18:c6:9c:5b:b2:60:6b:15:d9:5c:fe:bf:49:
         6d:ac:9d:80:2f:61:5e:73:25:90:d6:06:8e:51:96:e8:b7:a6:
         19:e9:07:16:73:2d:e6:37:58:87:0b:6c:b2:a7:61:51:e1:b8:
         97:41:c5:f6:d2:f7:f5:6a:6d:a8:2b:1a:50:d6:20:34:84:c1:
         29:d7:65:91:04:2e:be:d2:60:16:47:44:9d:1f:fc:ed:0f:76:
         d9:bb:82:34:3d:02:c8:23:69:17:67:01:af:5f:96:71:aa:94:
         d4:9b:a4:1b:96:8f:9b:ea:66:1a:28:75:ea:e0:4b:a4:b3:2d:
         fb:92:9d:0c:a6:70:cc:67:32:69:f2:d2:0d:12:23:8d:99:1f:
         2e:8b:ae:57:dd:1a:ba:67:8c:ee:cb:ac:9b:8a:88:80:95:2f:
         00:43:e5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org